skysight-inc/HackerNews huggingface dataset:
I need a "digital public notary" service, where I send some hash to the notary, they sign it and give me back a signed copy (with the notary's system or public key of choice, e.g. 4096 RSA or 256 bit ECDSA or whatever)

If I want it to be considered reasonable valid proof that I did, indeed, have the data leading to the hash when the notary signed it, and I want stuff I sign today to be acceptable 10 years from now, would you consider HMAC-MD5 viable? How about HMAC-SHA1? I guess plain MD5 and SHA1 are out of the question according to this article.

Speed is not a concern here, so I would be happy with HMAC-SHA3 or anything else... Also, I keep reading that multiple signatures (MD5 + SHA1) are only as strong as the strongest one, but that does not make any sense to me - If you have two differently seeded (initial internal state) MD5 hashes, it should already be much harder to exploit (perhaps not double the number of bits, but surely a large load factor)?
Why James Dyson Invested $8,000,000 In A Student Incubator
Real purpose of recent Ababil DDoS bank attacks was to mask packet floods
So he's only playing his guitar because it's conveniently located in the same room, and you're only getting exercise because you have to walk to your printer sometimes. Setting up your living space so your surroundings encourage you to do things you feel you should be doing more seems like a sensible decision on both your parts.
Have you not done the Google-Bing side-by-side stuff? Personally, I can barely tell the difference. It's far from clear that Google outperforms any other algorithm by enough of a margin to matter. Certainly, Facebook outperforms all other social platforms by a much greater margin, both in terms of the network and ease of use.
Interesting, How is JavaScript 1.7 (and beyond) related to ECMAScript 6? And I wonder if TypeScript has something like this...
> (2) HN is not a forum for complaints about YC companies

The user in question looks like he/she has been here for a while, so isn't just someone signing in to bitch about a company. People also regularly use HN to complain about Google, since they are generally not that great at customer service, so it's hardly a precedent.

Ultimately, you are correct that it's not the purpose of this site, but as long as it's an occasional thing, done with respect and tact, and aims to improve the service, I don't think it's such a bad thing. I'm not sure this post is the best example of all those qualities, but AirBnB is also big enough to handle it, too, no? It's not like he's picking on someone just starting out.
Best practice when storing passwords is to hash them, then compare the hash of the user input to the stored hash. If a user can compute all the possible input->hash mappings for a given set of parameters (salt, etc.) they can figure out the password from the hash.
> It's amazing what some companies ask you to send via email.

My state allows people to cast ballots via email.

During the hearing, some retired National Guard General testified that "security has gotten really good". I assume he's on the payroll of the vendor, but I didn't bother to check (this time).
please, please, please use more contrast on the nav bar.
This is common in the kayaking/climbing community.

Every paddler I know living out of a van gets an old Toyota Previa. Why? They're cheap, fuel-efficient, readily available, easy to gut the back, and deal with dirt roads fairly well.
And both positions are absurd. That was the point.
Automating xkcd Diagrams: Transforming Serious to Funny
Use math and programming to turn serious scientific diagrams into humorous hand-drawn-like sketches. Even online app to try it.
If you make a lot of money buying users, you have very little incentive to talk about it. For one, you admit you don't have something magic and irreplaceable like a well known founder or well read blog. Secondly you may give a hint to competitors about which channels or keywords of paid acquisition are working for you.
I heard other people calling this lower class tourism, that doesn't really seem to be the case though. It seems like a perfectly reasonable way to live for a single guy w/ a day job or someone trying to build a company. I'm not single, but if I were I would like to try something similar. Right now, I'm renting out my entire condo. I would like to rent out everything besides the garage and just live in there.

The reason? I don't like to have too many things, I feel it complicates my life. I'm fine w/ a working internet connection and a comfy bed. I don't understand why I am abusing white privilege or engaging in lower class tourism by simplifying my life.

I think there is a big problem w/ wealth distribution in this country. But, I think most of that can be blamed on our political system that basically gives the most benefits to the people who pay politicians the most to vote for bills they support and can bills they disdain. Also we have a banking system with absurd incentives that ensures rich bankers are payed by the government each time they gamble away all the nation's capital on insane investments or ponzi schemes.
down by the river
Could a tick box be implemented beside each title on the main page as I don't alway have time to read the full article linked at a particular time, and if its a couple of days before I get a chance to do so it is difficult to find the article again.
Then put an option for the user when they come back to the page to have it display the articles they previously ticked.
The comparison here is not to a menu system, but to a wireless keyfob. Contrast pin engagement with keyfob signal decryption.

If your car door has menus, then yes, that's a huge usability problem, but no one's arguing in favor of that.
The irrelevance of (1) aside, you are making a huge assumption there. In Ontario for example, you need to tell your landlord, but they basically can't refuse.
The Google Wallet example is entirely disingenuous. Compare these two:

1. Get (real) wallet.

2. Find the right card.

3. Swipe the card.

4. Press 'Debit' on the machine.

5. Press 'No' to the cash back prompt.

6. Enter my PIN.

Versus:

1. Get out phone.

2. Wake the screen.

3. Touch the phone to the machine.

4. Enter my PIN on the Google Wallet prompt that appears.

5. Confirm the payment.

If they were to list the steps for paying with a normal credit card would their list include "find the teller's hand so you can give them the card"?

Edit: How do I <ol>?
So by saying 'cannot _always_ work,' and 'very unlikely to work,' you are implicitly conceding the point- that it is possible. The question then becomes, given the size of the OS environment space (and the quality of the randomness in the originals), could one in 50 attempts actually succeed in shaving off a byte? I sincerely doubt that Mike, despite his superior knowledge of information theory, actually took the time to figure out just how good or bad the odds were. He assumed that it was fundamentally impossible, when it is in fact not impossible, just unlikely (to some unknown [to me] degree).
Howdy. I was the presenter from Twitter.

Aside from your bad math above, the reporter heard million when I said billion. More than 3 billion rows per day. That math is easy enough to come by if you do any math on the rest of the numbers: 400M (Tweets per day) * 4 (replication) = 1.6B rows per day to store the Tweets, plus the same amount for an entry in a timeline. So that's 3.2B right there. And there are a lot of other types of indexes.
i will certainly take that into consideration :)
It's not that they can't; it's that they don't care. Airbnb has a great engineering team who could definitely setup a more secure way to do this.

The issue is that they only do things that will make them money. Until a lot of customers complain and hurts customer acquisition or revenues, they're not going to change it.

This is exactly the MVP / "lean startup" approach: do the absolute minimum. It's a smart way to deploy capital. But customers of these kinds of companies should be careful but they're usually complete products (by design) and may have sharp corners.

I normally stay away from buying anything from startups for this reason.
people complain about artificial inflation, when states print money for no reason, while this article talks about inflation generated by real economic facts (like a bad year in agriculture).

So yes, if you ignore half of reality, you are right!

and what is this? "If the state endows the money with value". Money have a certain value because everybody using them agrees on that value. Dictatorships tried and failed to "endow the money with value". What happened in my country was that some alternative, valuable papers were created. Like a card for bread ratio. That piece of paper had value even if nobody was calling it "money". Or other papers that gave you some rights like buying a car, getting an apartment, vacation tickets etc.
tldr; The gold standard won't come back because the government would not be able to print trillions of fictional dollars whenever they want.
First Generation iPod Recreated in HTML5
There are humorous examples from the past, where there 20 PDF files prepared in advance, all having the same MD5 hash, where each one of them says "We hereby predict X is going to be president".

You publish the hash in advance, and after elections you only publish the right PDF file, thereby "proving" your clairvoyance.

More seriously: You can get a notary (e.g. Microsoft Authenticode) to sign one file, and then provide another with the same hash.

For now, it only helps you with planned fraud, not after-the-fact forgery.
> My assumption would be that 50% of files are not compressible at a given size, and that compressibility doesn't vary with file size.

This would mean that say, for a 2 MB random file there's 75% chance that at least one of its halves is compressible but only 50% chance that the file as a whole is compressible. Not impossible but suspicious if you ask me.
That'll only take about 10^585 years, assuming you can do a billion hashes a second. Good luck!
I just got the T530 about a month ago. It was a rough order process as it was delayed numerous times. (This will be fixed by moving onshore now). It has been a great machine.

The only complaint I have about it is the slow wake time. For whatever reason (even after following some optimization tips), when it wakes from closed cover or timeout it takes forever.
Free pro account if you can find an error in my app
As one of many start-up peeps here on HN we've very sorry you had to jump through those hurdles. Your post is on the main page and is certain to get the right attention quickly.

For the rest of us, the only responses required is someone who knows ABNB lets us know they contacted them, and then ABNB following up here with an apology to the user & HN.

Don't talk on and on about it. Just fix it.
Side effects from abuse, and the short term (7-10 day) duration of the effect. If they can isolate the effective properties and recreate them, it's possible to find a drug or drugs that can solve those two problems. Also, it's unlikely that (due to it's potential for abuse) ketamine prescriptions will be handed out anytime soon. So patients can go in for weekly treatment, or researchers can find something more palatable to the current political climate.
Interesting. There's not a single 3rd party you trust as much as you trust Facebook? You, presumably, allow Facebook access to your account when you use, say, their mobile app, or their mobile chat app. Say someone came up with a better FB chat app that you liked better: you wouldn't use that because of the permission issues?

What I'm talking about here is simply this: trusted apps that don't want to spam your wall but that would be made more useful by allowing direct notifications to OTHER Facebook users.

To me, this is intrinsic to Facebook becoming the social layer upon which all other applications are built.
First gen iPod, in-browser
It seems that the problem involves two parts:
1) To find an upper bound
2) Then divide the remaining region in halves until the number is found.

The first observation that I have is that given that the secret number s is chosen, the first step can be completed arbitrarily quickly. One could use a function that rises arbitrarily fast. Imagine for example the function taking k to the Ackerman function A(2,2,k). That rises so fast it's incomprehensible, but really one could easily produce a function which rises faster still (the algorithm that picks s first!). The problem is, though, of how fast a fixed algorithm is for random s. If s is truly chosen at random from the positive integers, this leads to problems. Fix your putative algorithm. Suppose for the moment that it starts at 0 (it is not going to matter where it starts) What is the probability that the kth number that your function spits out is less than a random integer? 100% After all, how many integers are greater than any given integer?

Therefore, no growth function is any better on average at finding the upper bound than any other. Therefore step 1) is an insoluble problem. The problem should have been specified in some other way in order for it to make sense.

However, the second step involves log_2(n) time (in the worst-case-scenario and still O(log n) in general) where n is the upper bound --the output of step 1-- which means that the time to complete the algorithm is (Time of step 1 to find n) + O(log n). IF the problem made sense and it was the case that step 1) were soluble, then it would matter how fast step 1 is countered by the degree to which step 1 tends to overshoot the secret number --because overshooting by k has the penalty of log(k) extra operations.

Is there are framework in which question 1 makes sense? It would make sense if there were a given probability distribution on the integers (a function on the positive integers whose sum over all integers = 1, for example choose the function f(n) = 6/(n^2 * pi^2)) A probability distribution gives you a way of answering the question: "what proportion of the positive integers are greater than k?"
I work for the largest (I believe) 'callcenter in the cloud' companies. http://www.liveops.com/

You can work from anywhere, as long as you have a good phone line and good Internet.
I really want to be doing this when I'm 70(14 more years). And then I still want to be doing it, just part-time and probably for free.
I just had to dig out my logs and see what it was - file in question is located in (default install):

C:\Go\src\pkg\regexp\testdata\re2-exhaustive.txt.bz2 385KB in size though opening shows a .txt file that is 58MB in size. Basicily Avast being picky and a non-positive. Probably so crompessed that it hit whatever limit on decompressing per file in avast and avast then things its a compression bomb. Opens and extracts fine, though hardly fun reading.
Check out this table: http://en.wikipedia.org/wiki/ECMAScript#Version_corresponden...

I think the 1.# versions came from Mozilla, but the ES editions are the true standards. So 1.7 is ES3 plus some extensions in Firefox. It looks like ES6, when finished, will be 2.0.
Indent everything with four spaces:

like so
Of course we can replace facebook. If you think about it, we don't really need a "social network" - all these things can be done via e-mail, xmmp and irc (all of which are standard open protocols). Use mail groups instead of "pages" and "communities", set up your mail client to neatly arrange incoming messages in folders and voila. Use xmmp for private conversations. Use irc for group conversations. It's easy.

The thing is, most non-technical users won't be able to do it. Can you imagine your grandma using irc?

The value of facebook and similar social networks is that they unlock the power of internet communication for people who would otherwise be unable to use it.
Yes it does. Lets say for simplicity that you are coding your solution in python, and that your output should be written to standard out, and the output file should be 10^6 bytes.
Consider the function that takes a source file of at most 10^6 to the standard output of said program when interpreted.
The set from which files you need to output, are drawn has cardinality 2^(10^6). The set of python programs (possibly invalid) that are strictly shorter has cardinality 2^(10^6-1). If all files were possible to compress, than a python interpreter would provide an injective map (one program gives maximum one output, possibly none if the program has errors) from a smaller set to a larger set. This is impossible. Therefore there is at least one file(actually a lot of them but this is beside the point) which cannot be compressed. Mike could send this one.

EDIT: Messed up my bits and bytes and fenceposts:
size 1: 256^(10^6). Size 2: sum (i=1 to 10^6) 256^(10^6-i)
Writing Home Page Headlines For Startups
What the article is about is hash collisions - two different pieces of data with the same hash value, not using a hash to obtain the original data.

That's what I'm wonder at the value for.

Otherwise your're totally accurate.
My intuition says that they should almost always run at about the same time if you don't know anything about the distribution of guesses. Your algorithm has the advantage that it will find an upper bound for the number much faster than the interviewer's algorithm. HOWEVER, having found that upper bound, your algorithm will probably be much farther away from the actual number than the interviewer's, so you have to do that much more narrowing down. What it comes down to is being lucky that you're close to the number in your initial guess, otherwise, you're still talking logarithmic time to either find an upper bound or (in your case) lower bound for the number.
I'm saying that a central authority with that kind of power is necessary and advantageous in a recession. And that they (central banks) are more accountable to the people than e.g gold mining companies.

And the propensity for libertarians to indulge in conspiracy theories is more than guilt by association.
See I have the complete opposite opinion. I love the spanX semantics and .pull-left etc etc make complete sense to me so I think you might be on the ball with it being made for a developer moreso than a designer.
A guy I know recently bought a van, and you nailed it. It has nothing to do with patio11's comment, and everything to do with the 'minimalist' experience you describe. He says it's an experiment - maybe he'll get tired of it, but it's something he wanted to try, and has the cash to spend on it (the van was not cheap). I can't say I would be interested in that variety of experiment myself, but "to each his own".
The van thing should resonate with a lot of entrepreneurs. As a bootstrapped 20-something entrepreneur I couldn't help but secretly think "live in a van" was my backup no matter how well things were going.
Star Trek? You know we have this technology at supermarkets now, right? :)

This still isn't truly a no-interface situation, though. It's an interface that's so natural that you don't have to think about it. You express your intent by walking toward the door. You're still expressing intent, though. The sensor just does a really good job interpreting that intent and acting on it. But like all interfaces, this one is still imperfect. e.g. Sometimes the door will open up when you're just walking too close. Or sometimes it doesn't open when you expect, presumably because it's poorly calibrated (or maybe you have no soul[1]).

[1] http://www.youtube.com/watch?v=f4jCBk8OpsQ
I think this is the correct way to look at. a CPU is vastly slower at performing rainboow attacks than a GPU. Many of the largest bitcoin rigs could probably find a SHA-1 collision in a matter of months.
People get bored of looking at the same thing for too long.

The combination of HTTP, Browsers, HTML, etc provides a broad canvas for artists, designers and makers to paint on. Facebook and Twitter are trying hard to take all of these amazing experiences, content and sites and package them up into a wall post or tweet. This is going to get boring for the majority of users and another solution for finding great content will catch our collective interest.
Ah, got it. Didn't think about the "controlling both copies" subterfuge, but that makes a lot of sense.
I have a feeling the OP couldn't care less whether AirBnB were doing those checks. The OP knows he lives there, he doesn't need someone to verify that.
If we're going to rally against archaic "security" practices can we start to jerk about signatures? I'm not sure how my scribbles identify me when the person looking into it has no clue if those are TheCapn's scribbles or Brucehart scribbling "TheCapn" all signature-like.
Without getting into a debate about technical considerations (or politics), one must consider the threshold:

"There's no sense in being precise when you don't even know what your talking about"

-- John Von Neuman[1]

____________

[1] Viz: "It is the mark of an educated man to look for precision in each class of things just so far as the nature of the subject admits." Von Neuman more than likely "borrowed" this idea, a notion Aristotle's 2,000 year old Ethics. (Source: NE 1094b24)
If you can make something of value that persists after you stop infringing, then I would say it's worth it to the world. For example, YouTube is a great asset to the world that would not exist without early infringement. But that's a moral calculus you have to do for yourself.
Yeah, I haven't made any provision for the other calculations required by the attack, so maybe those take a lot of resources, maybe they don't.
By definition they can not possibly be a great engineering team if they demonstrate that they are completely and totally incompetent like this. "I don't care about doing important things correctly" is a statement of incompetence.
Although AirBnB customer service was bad here it seems you also were at fault. They asked for two documents. You didn't want to send one of them over email (understandable). At that point you should have cancelled the rental. Hoping they would get back to you and waive a requirement wasn't a good idea.

Not sure HackerNews is the right place for this. Emailing AirBnb's customer service/complaints department would be better.
Steve Jobs came within a song of going to the Moon
I've heard secrecy thrown about quite a bit but I've always been a bit mystified as to why. The reason I'm confused is because it seems as though any of your well healed competitors would be able to study your product/marketing/etc and determine what you are spending time and effort on to acquire customers.

For instance one of the tactics mentioned in the blog is SEO/Adwords. From a competitors standpoint it seems like it would be pretty easy to reverse engineer where the company is devoting most of their money and effort into and thus their user acquisition strategy.

This of course assumes the competitors are technically sophisticated. Is this assumption really that much of an exception? Meaning, for those in business, are your competitors really that stupid?
The point that you made was mere opinion you hold. You did nothing to substantiate why either positions are absurd.

Instead of telling libertarians "Why inflation is not theft ", you ended up echoing the libertarian sentiment that inflation is no worse than taxation.
While this is some solid advice, the methodology used is rather err stupid. It's like comparing how fast somebody will find a treasure, and then in case A put the treasure in the middle of times square, and in case B put it somewhere in the sewers.
Do that, but then rename each folder to a very long name, and go back one directory up in the tree e.g. d:\h\h\h becomes d:\h\h\very_long_h then d:\h\verl_long_h\very_long_h, etc.

It was "simple" way to hide files, by making their names very long indeed.
If you want to hate on Facebook there should be less focus on Facebook the tool, which is a useful communication service, and more focus on Facebook the company, which is horrible.

Terrible business model, "shadiness", and being part of an ongoing mass of wealth evaporation (Zynga, as we speak) is what bothers me the most about Facebook.
He won one byte per file.